$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa File: 3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa (raw, json) Hash identifier: VsXO58FTVSxasgY1Mnu3yqI7EZkkcRqpzQFvmDd4qLs= Subject key identifier: C9:2E:F9:7D:5B:E2:6B:C2:0B:F7:AA:F3:54:86:85:53:F5:99:0E:F2 Certificate issuer: /CN=01F324EF5A8F6ACC92174D6AEED1129E1623A616 Certificate serial: 422C54F8663C81C8C1765AAD73C7E832AB3F5E9C Authority key identifier: 01:F3:24:EF:5A:8F:6A:CC:92:17:4D:6A:EE:D1:12:9E:16:23:A6:16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F324EF5A8F6ACC92174D6AEED1129E1623A616.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa Signing time: Sun 03 May 2026 02:54:24 +0000 ROA not before: Sun 03 May 2026 02:49:24 +0000 ROA not after: Sun 02 May 2027 02:54:24 +0000 asID: 138886 IP address blocks: 103.189.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.crl rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F324EF5A8F6ACC92174D6AEED1129E1623A616.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 09:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2c:54:f8:66:3c:81:c8:c1:76:5a:ad:73:c7:e8:32:ab:3f:5e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01F324EF5A8F6ACC92174D6AEED1129E1623A616 Validity Not Before: May 3 02:49:24 2026 GMT Not After : May 2 02:54:24 2027 GMT Subject: CN=C92EF97D5BE26BC20BF7AAF354868553F5990EF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:42:ab:91:70:31:92:6e:c5:aa:c8:00:30:30: 3f:59:2f:ad:84:1d:f7:af:21:7a:f3:5a:e8:16:e6: 8a:43:1a:b2:d0:68:75:30:14:28:da:65:30:20:ca: b1:8c:bc:f2:d1:aa:5f:f9:ff:78:a7:13:29:00:56: 12:aa:0c:81:af:f5:5a:49:95:6b:5d:ff:6b:e8:ec: af:9c:43:41:33:d3:22:59:1d:35:5c:dd:53:5a:6c: 81:c9:63:8e:a1:7f:3c:9d:f4:c3:70:40:6f:79:d4: b8:bb:24:5b:1d:02:9e:06:1c:3d:0c:57:dc:71:89: d3:9b:66:f1:c9:09:9b:28:42:31:59:b6:1a:9a:4d: df:93:6b:73:f0:44:ea:32:ab:ab:41:3a:ee:87:b4: ef:f0:15:bc:6a:45:9e:e1:dc:17:cf:79:c9:49:52: 5d:fe:99:96:d2:56:4a:57:ca:a9:9e:cb:9a:48:ae: ef:64:50:5d:26:ec:3c:f5:7f:70:aa:b0:f9:4f:b3: dd:02:c8:1d:c3:d7:c6:64:cc:13:b9:02:95:a8:3e: e4:c5:0c:7b:52:4c:6b:5a:39:05:33:5d:3c:55:a6: 64:a6:6e:01:cf:80:04:03:5b:a4:4a:89:fd:a7:e7: f1:31:ff:bf:8f:3f:f8:e0:48:7f:a0:63:03:6e:a2: 05:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2E:F9:7D:5B:E2:6B:C2:0B:F7:AA:F3:54:86:85:53:F5:99:0E:F2 X509v3 Authority Key Identifier: keyid:01:F3:24:EF:5A:8F:6A:CC:92:17:4D:6A:EE:D1:12:9E:16:23:A6:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F324EF5A8F6ACC92174D6AEED1129E1623A616.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.120.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:4c:f8:1e:86:8d:aa:38:14:c1:0d:55:85:ef:91:c8:1b:8b: 48:3f:26:b1:34:6e:89:ca:1c:1e:56:32:06:4a:83:6f:d8:a3: cb:6c:34:58:43:ef:1e:8c:3d:9c:b6:c1:72:5c:d1:a0:a9:c3: 8c:8d:3a:83:44:51:d7:84:25:c6:88:52:c2:2b:e4:00:9d:ec: 4c:3e:cc:9e:9f:78:76:fc:b2:0f:33:9f:66:62:99:0b:5f:07: 0e:78:0c:07:5b:62:0d:67:f9:56:37:d1:0c:9a:36:a9:f5:2b: 59:6f:9c:25:e8:7b:6c:0d:ec:68:29:68:6e:e0:f1:35:15:4f: 87:5f:5b:c2:99:78:40:47:ae:2f:61:56:3e:e5:88:02:e2:a7: a6:11:b3:4c:5c:15:72:28:e4:43:f7:73:94:c5:e0:fb:93:50: 2c:3e:5f:13:df:a3:f6:e0:99:2f:15:f8:57:48:3a:9c:6b:31: 38:9b:e4:6c:d8:a0:bf:5e:68:d4:fa:fe:d1:4e:d6:03:2e:b6: 66:5e:e9:2a:b3:b4:3d:27:68:a7:ed:78:7b:46:3d:f9:7b:c9: 06:ed:e6:a7:98:46:45:87:41:c5:47:e8:8f:34:32:63:88:a6: 40:ff:21:eb:54:10:7c:1a:2b:b7:56:d9:65:a8:e4:82:6f:c4: df:37:b8:7b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUQixU+GY8gcjBdlqtc8foMqs/XpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGMzI0RUY1QThGNkFDQzkyMTc0RDZBRUVEMTEyOUUx NjIzQTYxNjAeFw0yNjA1MDMwMjQ5MjRaFw0yNzA1MDIwMjU0MjRaMDMxMTAvBgNV BAMTKEM5MkVGOTdENUJFMjZCQzIwQkY3QUFGMzU0ODY4NTUzRjU5OTBFRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5QquRcDGSbsWqyAAwMD9ZL62E HfevIXrzWugW5opDGrLQaHUwFCjaZTAgyrGMvPLRql/5/3inEykAVhKqDIGv9VpJ lWtd/2vo7K+cQ0Ez0yJZHTVc3VNabIHJY46hfzyd9MNwQG951Li7JFsdAp4GHD0M V9xxidObZvHJCZsoQjFZthqaTd+Ta3PwROoyq6tBOu6HtO/wFbxqRZ7h3BfPeclJ Ul3+mZbSVkpXyqmey5pIru9kUF0m7Dz1f3CqsPlPs90CyB3D18ZkzBO5ApWoPuTF DHtSTGtaOQUzXTxVpmSmbgHPgAQDW6RKif2n5/Ex/7+PP/jgSH+gYwNuogVlAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUyS75fVvia8IL96rzVIaFU/WZDvIwHwYDVR0j BBgwFoAUAfMk71qPasySF01q7tESnhYjphYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI3OTQ3YWEtY2U2OS00MDEzLWEyNTYtNTg3OTlhNTY1ODFjLzAvMDFGMzI0RUY1 QThGNkFDQzkyMTc0RDZBRUVEMTEyOUUxNjIzQTYxNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMUYzMjRFRjVBOEY2QUNDOTIxNzRENkFFRUQxMTI5RTE2MjNB NjE2LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzliNzk0N2FhLWNlNjktNDAxMy1h MjU2LTU4Nzk5YTU2NTgxYy8wLzMxMzAzMzJlMzEzODM5MmUzMTMyMzAyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzODM4MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnvXgwDQYJ KoZIhvcNAQELBQADggEBAFpM+B6Gjao4FMENVYXvkcgbi0g/JrE0bonKHB5WMgZK g2/Yo8tsNFhD7x6MPZy2wXJc0aCpw4yNOoNEUdeEJcaIUsIr5ACd7Ew+zJ6feHb8 sg8zn2ZimQtfBw54DAdbYg1n+VY30QyaNqn1K1lvnCXoe2wN7GgpaG7g8TUVT4df W8KZeEBHri9hVj7liALip6YRs0xcFXIo5EP3c5TF4PuTUCw+XxPfo/bgmS8V+FdI OpxrMTib5GzYoL9eaNT6/tFO1gMutmZe6SqztD0naKfteHtGPfl7yQbt5qeYRkWH QcVH6I80MmOIpkD/IetUEHwaK7dW2WWo5IJvxN83uHs= -----END CERTIFICATE-----Generated at Tue May 5 16:51:35 2026 by rpki-client